CVE-2009-3932: Google Chrome

High severity, CVSS 9.3. EPSS: 3.2% chance of exploitation in the next 30 days.

The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service (memory corruption and plugin crash) or possibly execute arbitrary code via unspecified use of the Gears SQL API, related to putting "SQL metadata into a bad state."

Affected products

• Google Chrome: up to and including 3.0.195.21; version 0.2.149.27 only; version 0.2.149.29 only; version 0.2.149.30 only; version 0.2.152.1 only; version 0.2.153.1 only; …

Published 2009-11-12. Last modified 2026-06-16.